Security ToolsPrivate by design
CSP Header Generator
Choose directives and allowed sources to build a Content-Security-Policy header for your site.
How to use this tool
- 1Enable the directives you need (script-src, style-src, etc).
- 2Add allowed sources for each.
- 3Copy the generated CSP header value.
Frequently asked questions
Where do I put this header?+
Set it as a Content-Security-Policy HTTP response header from your server or CDN, or as a <meta> tag as a fallback.
Related tools
Keep the boring tools boring.
If this saved you five minutes of nonsense, you can help keep the free tools running.
Buy the toolbox a coffee